The Role of Online Forums in Developer Understanding of Privacy Law - A Reddit Case Study
Authors: Sara Haghighi (University of Maine), Clark LaChance (University of Maine), Ali Pourghasemi Fatideh (University of Maine), Travis Breaux (Carnegie Mellon University), Sepideh Ghanavati (University of Maine)
Volume: 2026
Issue: 4
Pages: 321–340
DOI: https://doi.org/10.56553/popets-2026-0123
Abstract: Software practitioners use online forums to navigate complex and often ambiguous legal privacy requirements, yet little is known about their professional backgrounds, what challenges they face, and how they use and assess the credibility of the advice received, or how they resolve ambiguities in posts. We report the findings of a survey of 223 Reddit users from regulatory-focused subreddits, complemented by a qualitative analysis of 2,248 posts and responses. Our results show that, despite holding privacy-related certifications, most participants frequently use forums to seek legal advice. Key challenges reported or identified include implementing a data protection impact assessment, reporting a data breach, and obtaining cookie consent. Reddit users often assess credibility by reviewing respondents' post history, verifying sources cited, trusting advice from recognized experts, and following up for clarity before responding. We highlight research and educational directions to bridge gaps in support needed for regulatory compliance guidance.
Keywords: GDPR, Reddit, Survey, Privacy Compliance
Copyright in PoPETs articles are held by their authors. This article is published under a Creative Commons Attribution 4.0 license.
